(d) The requirement is to identify the reply that does
not represent a potential security and control concern. Answer
(d) is correct because the distribution of data actually decreases
this risk so this would not cause a control concern; it is a
potential advantage to distributed systems of various architectures
versus centralized data in a single mainframe computer.
Answer (a) is incorrect because password proliferation is a considerable
security concern because users will be tempted to write
their passwords down or make them overly simplistic. Answer
(b) is incorrect because consistent security across varied
platforms is often challenging because of the different security
features of the various systems and the decentralized nature of
those controlling security administration. Answer (c) is incorrect
because under centralized control, management can feel more
confident that backup file storage is being uniformly controlled.
Decentralization of this function may lead to lack of consistency
and difficulty in monitoring compliance.